[All remote jobs](https://jobicy.com/jobs.md)[![Ashby logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/63864ee6-221.png)](https://jobicy.com/company/ashby.md)[Ashby](https://jobicy.com/company/ashby.md) # Senior DevSecOps Engineer AI Summary Ashby is hiring a Senior DevSecOps Engineer to make software delivery secure by default across application code, infrastructure, dependencies, containers, and product configuration. The role owns the integration, tuning, reliability, and coverage of security tooling in CI/CD workflows, while partnering with application security, infrastructure, and product engineering teams. Key work includes implementing scanning controls, self-service exception workflows, security telemetry, and bounded remediation automation. This is a senior hands-on security engineering role focused on developer experience, operational reliability, and scalable secure-delivery foundations.[Apply for this job](#job-application)[View company](https://jobicy.com/company/ashby.md)ShareRemote from[Europe](https://jobicy.com/job-region/europe.md)SalaryEUR 108k–145k / yrDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceDirectorPublished15 Nov 2026Apply before15 Dec 2026Listing views29Application actions0Application toolkit ## Make your next move. Prepare your resume, explore your fit, and draft a cover letter for this opportunity. Opportunity details ## About this role. Hi 👋🏻 I’m Louis, Head of Security. You’ll report directly to me. What [Ashby](https://jobicy.com/company/ashby.md) gives you in return is the best of both early and growth-stage environments. The agency and no-nonsense of a seed startup: you contribute to useful projects, make practical decisions, and work in an almost-no-meeting culture. The product-market fit and scale of a growth-stage startup: tens of thousands of daily users who depend on our software, and customers whose trust your work will help us earn. We have notable customers like Notion, Linear, Shopify, and Snowflake. Our growth and retention metrics are best-in-class among our peers: we have tens of millions in ARR, growing >100% year over year, very low churn, and many years of runway. We’ll share more details once we meet. You’ll join our Security team, a single team with multiple specializations overseeing security across the business. I report to Abhik, our Co-Founder and VP of Engineering. We’re bubbling with ideas on how to support Talent Acquisition through software, and we’ve started the journey of building products beyond Talent Acquisition. We read every application and aim to respond to yours within 3-4 days (often sooner). ### Role Overview We’re looking for an engineer with a passion to learn whose focus is on building “paved roads” specifically around making secure delivery part of the way we build and ship software. You’ll operate the checks and workflows around our delivery pipeline, help engineers act on useful findings, and make routine exceptions straightforward under agreed policies. We expect you to bring the same care to the reliability of a security check and the time it costs an engineer as you bring to the risk it addresses. You’ll build the integrations, learn from rollout, and maintain what you ship. We have notable customers like Notion, Linear, Shopify, and Snowflake. Our growth and retention metrics are best-in-class among our peers: we have tens of millions in ARR, growing >100% year over year, over 2500 customers, very low churn, and many years of runway. We’ll share more details once we meet, but you now probably have a good idea as to why we’re hiring for this role 😅. ### About the Role and How We Work We’re also advertising this opening as Senior Security Platform Engineer – Secure Delivery. Both titles describe the same position; please apply once using the title that best reflects your experience. Your mission is to make our delivery pipeline secure by default across application code, infrastructure, dependencies, containers, and product configuration. You’ll own the technical implementation and operation of delivery-security tooling and controls, including integration, configuration, tuning, reliability, and coverage. Product Engineering teams own triage and remediation for the features they maintain. Application Security provides specialist analysis and defines product-security test requirements. Infrastructure retains ownership of the underlying cloud platform. You’ll work with those teams to make agreed checks and policies run reliably in the delivery workflow. In practice, you’ll: * Deploy, configure, integrate, and tune static analysis, dependency, secret, container, and Infrastructure as Code scanning in our CI/CD workflows. * Inventory production repositories and delivery paths, including prompts and model configuration. Make scanner coverage distinct from application-specific tests of AI behavior; AppSec defines those tests, and you operate agreed delivery checks. * Start new checks in report-only mode where appropriate, then implement agreed warn and block policies using exploitability, exposure, and compensating controls. * Give engineers self-service exceptions within documented rules, with an owner, justification, expiry, and audit trail. Escalate decisions outside those rules to Security leadership with the relevant specialist analysis. * Build automation and AI-assisted workflows that enrich findings, propose fixes, and support Product Engineering’s triage under documented criteria. Preserve required checks, review, and rollback for automated patch changes. * Make coverage, integration failures, finding age by risk, time to triage and remediate, false blocks, build delay, and bypasses visible. Record mitigations separately from completed fixes and connect useful telemetry to GRC evidence. * Work with Infrastructure on cloud-posture monitoring, useful critical-misconfiguration alerts, and bounded remediation automation. * Extend into shared-image hardening and artifact provenance as the delivery foundations mature. To ground it with examples, you could: * Roll out secret scanning with push protection and make a blocked push understandable and actionable for an engineer. * Turn a repeated scanner-exception request into a PR workflow with a reason, expiry, and evidence for revisiting it. * Reproduce a dependency issue in the application, add a regression check, and build a workflow that proposes a patch with useful evidence. * Show which delivery paths are covered, where checks fail, and whether enforcement is addressing risk while keeping build delays reasonable. ### Why You Should and Shouldn’t Apply You’ve built and operated CI/CD, developer tooling, or infrastructure automation used by other engineers. You can write maintainable code, explain the failure modes of what you shipped, and use security evidence to make a practical rollout decision. Supply-chain and scanner experience is useful; you can learn individual tools as part of the work. You’ve applied AI in engineering and can explain how you check its outputs and permissions. You enjoy treating engineers as users, making build-versus-buy decisions, and improving adoption and reliability after launch. You might not enjoy the role if: * You prefer to deliver a prototype and hand off its operation. Reliability, tuning, and existing integrations are part of the work. * You prefer a prescribed backlog to investigating an ambiguous problem, writing a proposal, and bringing partners into the work. * You want standalone assessments to be your main output. This role centers on working delivery capabilities and their adoption. ### Interview Process If this also sounds exciting to you, please apply. We review every application and aim to get back to candidates within 2-3 days. For candidates who advance to the interview process, here is what you can expect: * Recruiter Screen – 30 mins * Hiring Manager Intro Call – 20 mins * Past Projects Deep Dive – 45 mins * Founder Screening – 45 mins * Take-Home Assessment + Practical Assessment Review – 1 hr (2-3 spent on take-home assignment) * Cross-Functional Stakeholder Interview – 45 minRole-Specific Technology and Tools ### Role-Specific Technology and Tools For this role, CI/CD and infrastructure automation experience matter more than familiarity with a particular scanner. GitHub Actions or comparable systems, Terraform, containers, and cloud controls are relevant. You should be comfortable writing production automation in TypeScript, Python, Go, or a comparable language. Tool choices and individual scanner integrations are part of the work. ### Your First Three Months at Ashby Your early changes will give you a tour of our codebase, infrastructure, and best practices, increasing in scope and ambiguity as you learn how we work. You’ll pair program with your onboarding peer as you learn the delivery workflows. Your initial focus will be to: * Map production delivery paths and gaps across code, infrastructure, prompts, configuration, and evals, with clear ownership of the different checks. * Deliver a bounded scanning integration, such as secret push protection or report-only static analysis, with a usable finding workflow. * Establish initial warn, block, and self-service exception rules with the relevant partners and make Product Engineering ownership visible. * Baseline coverage, integration failures, false blocks, and build delay so the next rollout has evidence to build on. Early progress means engineers can use the selected checks, act on their findings, and handle routine exceptions. Broader rollout follows the agreed risk policy and what the first integration teaches us. ### Benefits * Competitive salary and equity. * 10-year exercise window for stock options. You shouldn’t feel pressure to purchase stock options if you leave Ashby —do it when you feel financially comfortable. * Unlimited PTO, and we will encourage you to take it. * A minimum of 12 weeks of fully paid parental leave, covered by Ashby. The actual number may increase to satisfy local requirements. * Generous equipment, software, and office furniture budget. Get what you need to be happy and productive! * $100/month education budget with more expensive items (like conferences) covered with manager approval. * If you’re in the US, we offer top-tier health insurance for you and your dependents, with 100% of premiums covered by Ashby. In other countries, we provide high-quality supplemental health insurance for you and your dependents, also fully covered by us. ### Closing Ashby’s success hinges on hiring great people and creating an environment where we can be happy, feel challenged, and do our best work. We’re being deliberate about building that environment from the ground up. I hope that excites you enough to apply. Ashby provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, genetics, sexual orientation, gender identity, or gender expression. We are committed to a diverse and inclusive workforce and welcome people from all backgrounds, experiences, perspectives, and abilities. Ashby is committed to a fair and transparent hiring process. We confirm that this advertisement is for an active, existing vacancy within our organization. Please be advised that we may use artificial intelligence-driven tools to assist our recruitment team in screening, assessing, and selecting candidates for this position. Show more [Apply now >](https://jobicy.com/jobs/162299-senior-devsecops-engineer.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 5/5EasyHard ### Pace & Pressure 4/5RelaxedFast-paced ### Autonomy Level 5/5GuidedFull ownership ### Communication Load 4/5IndependentCollaborative AI insightThe role requires senior-level ownership of complex security controls across CI/CD, cloud infrastructure, supply chain, and developer workflows. It involves ambiguous problems, production automation, risk-based policy decisions, and cross-functional influence. ## Salary analysis Estimated compensation compared with the broader EU market for similar roles. Estimated job median (per year)Market rate€126,500EU market range (per year)€105k–€150k0€165k AI insightThe employer discloses an annual base salary range of EUR 108,000 to EUR 145,000, with a midpoint of EUR 126,500. This is a credible range for a senior DevSecOps/security platform engineering role in the European market. Estimated European market compensation for comparable roles is EUR 105,000 to EUR 150,000 annually. ## Core skills Skills and capabilities most closely associated with this opportunity. [DevSecOps](https://jobicy.com/jobs?search_keywords=DevSecOps.md)[CI/CD](https://jobicy.com/jobs?search_keywords=CICD.md)[Security Engineering](https://jobicy.com/jobs?search_keywords=Security%20Engineering.md)[Static Application Security Testing](https://jobicy.com/jobs?search_keywords=Static%20Application%20Security%20Testing.md)[Software Composition Analysis](https://jobicy.com/jobs?search_keywords=Software%20Composition%20Analysis.md)[Secret Scanning](https://jobicy.com/jobs?search_keywords=Secret%20Scanning.md)[Container Security](https://jobicy.com/jobs?search_keywords=Container%20Security.md)[Infrastructure as Code Security](https://jobicy.com/jobs?search_keywords=Infrastructure%20as%20Code%20Security.md)[Terraform](https://jobicy.com/jobs?search_keywords=Terraform.md)[GitHub Actions](https://jobicy.com/jobs?search_keywords=GitHub%20Actions.md)[Cloud Security](https://jobicy.com/jobs?search_keywords=Cloud%20Security.md)[TypeScript](https://jobicy.com/jobs?search_keywords=TypeScript.md)[Python](https://jobicy.com/jobs?search_keywords=Python.md)[Go](https://jobicy.com/jobs?search_keywords=Go.md)[Security Automation](https://jobicy.com/jobs?search_keywords=Security%20Automation.md)Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. * ![Lightspeed Commerce logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/09/3d38005a-221.png) Lightspeed Commerce Nov 15 New ### [Staff P&T Incident & Technology Risk Operations Manager](https://jobicy.com/jobs/162342-staff-pt-incident-technology-risk-operations-manager.md) Hi there! Thanks for stopping by 👋 Are you actively looking for a new opportunity? Or just checking the market? Well… you might just be in the right place! We’re… * ![Ashby logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/63864ee6-221.png) Ashby Nov 15 New ### [Senior Security Platform Engineer – Secure Delivery](https://jobicy.com/jobs/162303-senior-security-platform-engineer-secure-delivery.md) Hi 👋🏻 I’m Louis, Head of Security. You’ll report directly to me. What Ashby gives you in return is the best of both early and growth-stage environments. The agency and… * ![Elevenlabs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/e01b4c5d-221.png) Elevenlabs Nov 15 New ### [Application Security Engineer – Agents platform](https://jobicy.com/jobs/162296-application-security-engineer-agents-platform.md) About ElevenLabs ElevenLabs is an AI research and product company transforming how we interact with technology. We launched in January 2023 with the first human-like AI voice model. Today, we… * ![Veeam Software logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/f7716b71-221.jpg) Veeam Software Nov 15 New ### [Coveware – Incident response Director (Remote: West Coast / Pacific Time)](https://jobicy.com/jobs/162272-coveware-incident-response-director-remote-west-coast-pacific-time.md) Veeam is the Data and AI Trust Company, specializing in helping organizations ensure their data and AI are fully understood, secured, and resilient to enable the acceleration of safe AI… * ![NerdWallet logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/11/ce9564777294-221.webp) NerdWallet Nov 14 New ### [Software Engineer, AI & Automation – Canada](https://jobicy.com/jobs/162215-software-engineer-ai-automation-canada.md) At NerdWallet, we’re building tools and experiences that help people make smarter financial decisions. As a Software Engineer focused on AI & Automation within our Security organization, you’ll build production… * ![Fastly logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/10/127f9e4bbbdb8767bef358a23bf7f73d.jpeg) Fastly Nov 14 New ### [Senior Software Engineer, Edge Security](https://jobicy.com/jobs/162147-senior-software-engineer-edge-security-2.md) Fastly helps people stay better connected with the things they love. Fastly’s edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and… * ![Baseten logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/11/f9522d034e6b-221.webp) Baseten Nov 14 New ### [IT Systems Engineer](https://jobicy.com/jobs/162141-it-systems-engineer.md) ABOUT BASETEN Baseten powers mission-critical inference for the world’s most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer. By uniting applied AI research, flexible infrastructure, and… * ![Apollo.io logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2022/01/f3c639242c4d1f4cb9c0730ac3842a72.jpeg) Apollo.io Nov 14 New ### [Senior Application Security Engineer](https://jobicy.com/jobs/162120-senior-application-security-engineer-4.md) Apollo.io is the leading go-to-market solution for revenue teams, trusted by over 500,000 companies and millions of users globally, from rapidly growing startups to some of the world’s largest enterprises…. * ![GitLab logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/12/WRILS-201207055737-109952.jpg) GitLab Nov 14 New ### [Threat Research Engineer, Security Factory: Threat Research](https://jobicy.com/jobs/162093-threat-research-engineer-security-factory-threat-research.md) GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50… * ![Beyond Finance logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2022/01/68cd015e123539d873279c7b82f1ca6a.jpg) Beyond Finance Nov 14 New ### [Staff Security Engineer](https://jobicy.com/jobs/155261-staff-security-engineer.md) At Beyond Finance, we’ve made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care,… [Browse all jobs](https://jobicy.com/jobs.md)